diff --git a/continuousintegration/docker/ctafrontend/cc7/config/ctafrontend/etc/xrootd/xrootd-cta.cfg b/continuousintegration/docker/ctafrontend/cc7/config/ctafrontend/etc/xrootd/xrootd-cta.cfg
index 253def873edc42580c2370638e9f7bf5459751d8..75c9948148ea87c74408ff85210dec21ccf3f6b2 100644
--- a/continuousintegration/docker/ctafrontend/cc7/config/ctafrontend/etc/xrootd/xrootd-cta.cfg
+++ b/continuousintegration/docker/ctafrontend/cc7/config/ctafrontend/etc/xrootd/xrootd-cta.cfg
@@ -6,6 +6,9 @@ xrootd.fslib libXrdSsi.so libXrdCtaOfs.so
 # Y3Rh is the Base64 encoding of cta, so this string appears at the beginning
 # of all cta admin commands
 ssi.fspath /Y3Rh
+# L3Vzci9iaW4vY3Rh is Base64 encoding of /usr/bin/cta which appears at
+# the beginning of commands called from the EOS WFE bash script
+ssi.fspath /L3Vzci9iaW4vY3Rh
 
 # Load the SSI module
 ssi.svclib libXrdSsiCta.so
@@ -38,4 +41,5 @@ all.export /ctafrontend nolock r/w
 # will go to the the underlying file system. Note that this prefix cannot be
 # a substring of '/ctafrontend', so it is not possible to simply export '/'.
 all.export /Y3Rh
+all.export /L3Vzci9iaW4vY3Rh